Static task
static1
Behavioral task
behavioral1
Sample
c883491dcaaa59b729f9e9d36446459a95bd4535b7699f80fb368568422f3cc0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c883491dcaaa59b729f9e9d36446459a95bd4535b7699f80fb368568422f3cc0.exe
Resource
win10v2004-20221111-en
General
-
Target
c883491dcaaa59b729f9e9d36446459a95bd4535b7699f80fb368568422f3cc0
-
Size
22KB
-
MD5
d3d0b5f70055f5b7de041356f0463504
-
SHA1
699e68a15b3c139314c99524dda7c735247a8d67
-
SHA256
c883491dcaaa59b729f9e9d36446459a95bd4535b7699f80fb368568422f3cc0
-
SHA512
0a8c7b2df3f8eabf68319285e9abddaf78f1c427f012d95882aa545dc8f84b12e0c3425d9e78ba0c61a125656e592c78190de5717e9071e2898a169956534371
-
SSDEEP
384:bz25CV3OxGOmJ1BM0+mC6VNwUKgrOnHbVTOD:bSatOYi1mHVNwuSt6
Malware Config
Signatures
Files
-
c883491dcaaa59b729f9e9d36446459a95bd4535b7699f80fb368568422f3cc0.exe windows x86
106b08f3b0d4858712a326ae5dbd868d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
HeapSize
GetCommandLineA
DeleteFileA
VirtualAlloc
IsBadReadPtr
GetFileSize
GetVersion
SetLastError
GetModuleHandleA
GetStdHandle
GetFileAttributesA
EnterCriticalSection
GetCurrentDirectoryA
CloseHandle
SetEndOfFile
WaitForSingleObject
ReadFile
DeleteAtom
SetFileAttributesW
SuspendThread
FindAtomW
ExitProcess
SetLastError
CreateFileA
cryptui
CryptUIStartCertMgr
LocalEnrollNoDS
CryptUIWizImport
CryptUIWizDigitalSign
DllRegisterServer
CryptUIWizBuildCTL
CryptUIWizExport
CryptUIDlgViewContext
WizardFree
CryptUIDlgFreeCAContext
WizardFree
DllUnregisterServer
LocalEnroll
uniplat
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
UmPlatformInitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ